Fixes #4218: add denybadclocks_system_var_spec